Product

Time4Popcorn (Windows <= 6.2.1.18, Mac <= 6.2.1.17, Android <= 3.5.0.173)

1 brief RSS

Time4Popcorn: Insecure automatic updater vulnerability (CVE-2026-30612)

A critical vulnerability (CVE-2026-30612) in the abandoned Time4Popcorn application allows remote attackers to hijack the unauthenticated background updater to execute arbitrary code with SYSTEM or root privileges.

Time4Popcorn endpoint-security vulnerability remote-code-execution botnet

1r 2t 1c 1i 4m ago